Skip to content

Base admin

Nax requested to merge base_admin into dev

This is a patchset to integrate Django Contrib Auth and Django Contrib Admin in Re2o.

Future Django Contrib Admin Interface

Add customisation to Django Contrib Admin

The default theme of Django Contrib Admin is not really great. This theme the Django Admin with Re2o logo and colors.

It also comes with a new dynamic-generated menu to navigate in the admin interface. HTML5 ready !

A new index page override the global index of Django Contrib Admin to prepare for new features. It also forces a full-width page.

Add a logout confirmation

This patch remove the custom rule in router responsible to redirect logout to index page and place a template with pre-translated strings.

Redirect Django Contrib Admin login page

Without this patch, Re2o has two login screen with different features.

This patch redirects /admin/login/ to the login page.

Override Django Contrib Auth templates

This override Django Contrib Auth templates to make them more integrated with the user site.

More precisely the breadcrumb now redirects to the index page rather to the Django Contrib Admin index page.

It also fix a security vulnerability in Re2o. Without this patch users are able to request for a new password AND the existing login name. So just with access to someone mail, it would be possible to hack into his account.

And yes, Re2o implements another password system. But this one is not disabled (see by yourself : https://intranet.crans.org/password_reset/).

Please note that the Django Contrib Auth password reset is broken for now due to the custom User (not responsible for) model but I have a future patch to fix that.

Edited by Nax

Merge request reports